Here are a few snippets from the FAQ from the advisory page. Bad news for Windows NT and Windows 2000 (pre-SP4) users - no patch for you. Microsoft also states that Windows 98 and Windows Me users do not need a patch - the advisory text suggests that no exploits that work on those old versions have been found in the wild that constitute a "critical" vulnerability.
How does the extended support for Windows 98, Windows 98 Second Edition, and Windows Millennium Edition
affect the release of security updates for these operating systems?
For these versions of Windows,
Microsoft will only release security updates for critical security issues. Non-critical security issues are not offered
during this support period. For more information about the Microsoft Support Lifecycle policies for these operating
systems, visit the following Web site.
For more information about severity ratings, visit the following Web site.
Are Windows 98, Windows 98 Second Edition, or Windows Millennium Edition critically affected by one or more
of the vulnerabilities that are addressed in this security bulletin?
No. Although Windows 98, Windows 98
Second Edition, and Windows Millennium Edition do contain the affected component, the vulnerability is not critical
because an exploitable attack vector has not been identified that would yield a Critical severity rating for these
versions. For more information about severity ratings, visit the following Web site.
Extended security update support for Microsoft Windows NT Workstation 4.0 Service Pack 6a and Windows 2000
Service Pack 2 ended on June 30, 2004. Extended security update support for Microsoft Windows NT Server 4.0 Service
Pack 6a ended on December 31, 2004. Extended security update support for Microsoft Windows 2000 Service Pack 3 ended on
June 30, 2005. I’m still using one of these operating systems, what should I do?
Windows NT
Workstation 4.0 Service Pack 6a, Windows NT Server 4.0 Service Pack 6a, Windows 2000 Service Pack 2, and Windows 2000
Service Pack 3 have reached the end of their support life cycles. It should be a priority for customers who have these
operating system versions to migrate to supported versions to prevent potential exposure to vulnerabilities. For more
information about the Windows Product Lifecycle, visit the following Microsoft Support Lifecycle Web site. For more information
about the extended security update support period for these operating system versions, visit the Microsoft Product Support Services Web site.
